Bug 2018198

Summary:	RFE - Add a warning note about possible performance impact of the Auto Member rebuild task.
Product:	Red Hat Enterprise Linux 8	Reporter:	Têko Mihinto <tmihinto>
Component:	ipa	Assignee:	Florence Blanc-Renaud <frenaud>
Status:	CLOSED ERRATA	QA Contact:	Ganna Kaihorodova <gkaihoro>
Severity:	low	Docs Contact:
Priority:	low
Version:	8.5	CC:	gkaihoro, pasik, rcritten, rjeffman, sumenon, tscherf
Target Milestone:	rc	Keywords:	FutureFeature, Triaged
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	ipa-4.9.11-5.module+el8.8.0+18146+a1d8660b	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	2167473 (view as bug list)		Environment:
Last Closed:	2023-05-16 08:28:45 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2167473

Description Têko Mihinto 2021-10-28 13:55:43 UTC

Description of problem:

It may happen that the Auto Member rebuild task triggers other plugins ( for instance the Schema Compatibility plugin ) and this could generate a high CPU event.

A customer experienced recently a high CPU issue for hours and would like to see a warning added to the IPA Web UI and to the CLI to mention such possible performance impact.

Version-Release number of selected component (if applicable):
RHEL 7.9
$ grep ^ipa installed-rpms 
ipa-client-4.6.8-5.el7_9.7.x86_64                           Sat Aug 21 10:58:43 2021
ipa-client-common-4.6.8-5.el7_9.7.noarch                    Sat Aug 21 10:58:42 2021
ipa-common-4.6.8-5.el7_9.7.noarch                           Sat Aug 21 10:58:42 2021
ipa-server-4.6.8-5.el7_9.7.x86_64                           Sat Aug 21 10:58:45 2021
ipa-server-common-4.6.8-5.el7_9.7.noarch                    Sat Aug 21 10:58:42 2021
ipa-server-dns-4.6.8-5.el7_9.7.noarch                       Sat Aug 21 10:58:46 2021
$

How reproducible:
Happened once at a customer site. 

Steps to Reproduce:


Actual results:
The rebuild task might trigger performance issues. 

Expected results:
Add a warning about possible performance impact. 

Additional info:

Comment 4 Florence Blanc-Renaud 2023-01-31 14:47:01 UTC

Upstream ticket:
https://pagure.io/freeipa/issue/9320

Comment 5 Florence Blanc-Renaud 2023-01-31 15:07:30 UTC

Upstream PR https://github.com/freeipa/freeipa/pull/6653

Comment 6 Florence Blanc-Renaud 2023-02-02 06:34:32 UTC

Fixed upstream
master:
https://pagure.io/freeipa/c/5154f8e63957b5e1c5f6db63953d197bab9f9048

Comment 7 Florence Blanc-Renaud 2023-02-02 10:09:13 UTC

Fixed upstream
ipa-4-9:
https://pagure.io/freeipa/c/2deaaa788cbdde22d5b15566599fdcf7a10f02c6

Comment 8 Florence Blanc-Renaud 2023-02-02 14:22:24 UTC

Fixed upstream
ipa-4-10:
https://pagure.io/freeipa/c/2857bc69957bde7e59fff1c66c5a83c7f560616b

Comment 13 Florence Blanc-Renaud 2023-02-18 08:07:34 UTC

Test for the CLI:
master:
https://pagure.io/freeipa/c/6a809ff58ff04adbcbb37f72a7d774f26ea8c397

Test cases:
ipatests/test_integration/test_automember.py::TestAutounmembership::test_modify_user_entry_unmembership_disabled
ipatests/test_integration/test_automember.py::TestAutounmembership::test_modify_host_entry_unmembership_disabled

Comment 14 Florence Blanc-Renaud 2023-02-20 07:18:08 UTC

Test for the CLI:
ipa-4-9:
https://pagure.io/freeipa/c/d035dc78cc7a1c88fc443719793a7c619af86fde

ipa-4-10:
https://pagure.io/freeipa/c/88b9be29036a3580a8bccd31986fc30faa9852df

Comment 17 Florence Blanc-Renaud 2023-02-22 08:17:59 UTC

WebUI test:
master:
https://pagure.io/freeipa/c/14a3d85a15fdb305ced0c5eff06737a437bd5aff

Comment 18 Florence Blanc-Renaud 2023-02-22 14:44:36 UTC

WebUI test:
ipa-4-9:
https://pagure.io/freeipa/c/ff50fe5f038be52207bb770179becc31fbc74e17

ipa-4-10:
https://pagure.io/freeipa/c/cd07413cba37150b12d6b279510941aad49b5afb

Comment 21 errata-xmlrpc 2023-05-16 08:28:45 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (idm:client and idm:DL1 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2794